Mega 8 Privacy Policy – Personal Data Protection for Malaysian Players

Welcome to the mega 8 Privacy Policy. This document outlines mega 8's commitment to protecting the personal data of all players and users of our platform in Malaysia. mega 8 operates as a data controller responsible for ensuring that all your personal information is processed lawfully, fairly and transparently.

We understand that your trust is our most valuable asset. When you register with mega 8 to enjoy games such as Live Casino, Sports Betting (Malaysia Super League, EPL, badminton), poker, E-Sports or Virtual Sports — you entrust us with your personal information. We take that trust seriously and handle it with full responsibility.

This Privacy Policy has been drafted in accordance with the requirements of Personal Data Protection Act 2010 (PDPA) Malaysia and is upheld across all mega 8 operations. By using the mega 8 Platform, you acknowledge that you have read and understood this Privacy Policy.

Mega 8 collects various categories of personal data depending on how you interact with our platform. Below is a detailed table of data we may collect:

Mega 8 collects only the data that is strictly necessary for the stated purposes — we do not collect excessive or irrelevant data beyond what is needed to operate the platform.

Mega 8 collects your personal data through several different channels:

A) Directly From You

• New account registration form.
• Identity verification process (KYC) — upload your MyKad or passport.
• Deposit or withdrawal requests via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX (Maybank2u, CIMB Clicks), and other methods.
• Interactions with the customer support team via live chat or email.
• Participation in promotions, contests or loyalty programmes.

B) Automatically

• Technical and usage data collected automatically when you browse the mega 8 Platform.
• Cookies and similar tracking technologies (further details in Section 10).
• Server logs that record general platform activity.

C) From Authorised Third Parties

• Identity verification service provider for KYC purposes.
• Malaysian payment providers to verify financial transactions.
• Fraud prevention agencies to ensure platform security.

Mega 8 uses your personal data for the following lawful and specific purposes:

• Account Management: Creating, verifying, and managing your Mega 8 account, as well as processing account-related requests.
• Transaction Processing: Processing MYR deposits and withdrawals via supported local payment methods, and maintaining accurate financial records.
• Service Provision: Enabling you to access and use all mega 8 services, including Sports Betting, Live Casino, poker and E-Sports.
• Security & Fraud Prevention: Identifying and preventing fraudulent activity, money laundering, and any misuse of the platform.
• Legal Compliance: Fulfilling Malaysian legal obligations including PDPA, anti-money laundering laws (AMLA) and other reporting requirements.
• Communications: Sending important account-related notifications, security updates and customer support responses.
• Marketing (with consent): Sending promotional information, bonus offers and the latest mega 8 news if you have consented to receive such communications.
• Platform Improvements: Analysing aggregated usage data to improve the user experience and platform performance.

Mega 8 processes your personal data on one or more recognised legal bases under Malaysia's PDPA:

• Consent: You have given explicit consent to the processing, such as to receive marketing communications.
• Contract Performance: Processing is necessary to perform the agreement between you and Mega 8 — for example, processing bets or withdrawals.
• Legal Obligation: Processing is necessary to comply with Malaysian laws such as AMLA, KYC requirements, and tax reporting.
• Legitimate Interests: Processing for Mega 8's legitimate interests, such as fraud prevention and network security — provided these interests do not override your fundamental rights.

Mega 8 does not sell your personal data to any external parties. However, we may share data in the following limited circumstances:

• Trusted Service Providers: Companies that assist us in operating the platform, such as Malaysian payment providers (TNG, GrabPay, DuitNow, FPX), identity verification service providers and server hosting companies bound by strict confidentiality agreements.
• Legal Authorities: When required by a court, Malaysian law enforcement agencies, or a regulatory body with lawful authority to request such information.
• Fraud Prevention: With fraud prevention agencies or industry security information-sharing platforms to protect players and the platform from unlawful activity.
• Business Transfer: In the event of a merger, acquisition or sale of mega 8 assets — provided the recipient upholds the same or higher data protection standards.

Mega 8 retains your personal data only for as long as necessary to fulfil the purpose of processing or as required by Malaysian law:

• Active Account Data: For the duration that your account remains active with Mega 8.
• Financial Data & Transaction Records: Minimum 7 years from the transaction date, as required under Malaysian financial regulations.
• KYC Data (Identity Verification): Minimum 6 years after account closure, in accordance with Malaysia's AMLA requirements.
• Support Communication Logs: 3 years after the last interaction.
• Marketing Data: Until you withdraw consent or contact us for deletion.

Once the applicable retention period has elapsed, your data will be securely deleted or anonymised so that it can no longer be linked back to your identity.

Mega 8 continuously invests in comprehensive technical and organisational security measures to protect your personal data from unauthorised access, misuse, loss or destruction:

• Encryption in Transit: All communications between your device and Mega 8's servers are secured using 256-bit SSL/TLS.
• Storage Encryption: Sensitive data stored in our databases is encrypted using AES-256 standards.
• Access Controls: A role-based access control (RBAC) system ensures that only authorised personnel can access specific data.
• 24/7 Monitoring: Intrusion detection systems and cyber threat monitoring operate around the clock.
• Penetration Testing: Regular security audits are conducted by independent third parties to identify and address vulnerabilities.
• Staff Training: All Mega 8 staff receive regular privacy and data security training.

While we take all reasonable precautions, no security system is 100% foolproof. We encourage you to use a strong password and never share your login credentials with anyone.

As a data subject under Malaysia's PDPA, you have the following rights regarding your personal data held by Mega 8:

To exercise any of the rights above, please contact us at privacy@mega8.ws. We will respond within 21 working days from the date the request is received.

Mega 8 uses cookies and similar technologies to enhance your experience on the platform. We use several types of cookies:

• Essential Cookies: Required for core platform functions such as login, game sessions and security. Cannot be disabled.
• Functional Cookies: Remembers your preferences such as language, favourite game types and display settings.
• Analytics Cookies: Collecting anonymised usage data to help us understand how players interact with the platform and to make improvements.
• Marketing Cookies: Used to display relevant advertisements. Activated only with your consent.

You can manage your cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality of some mega 8 Platform features.

The mega 8 Platform is exclusively for individuals aged 18 and above. We do not knowingly collect, process or store personal data of individuals under the age of 18.

Should we discover that a child's personal data has been collected without our knowledge, we will take immediate steps to delete that data and close the account in question. If you believe your child's data may have been collected inadvertently, please contact us at privacy@mega8.ws immediately.

Mega 8 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, technological developments or new legal requirements. When material changes are made, we will:

• Displaying a prominent notice on the Mega 8 Platform at least 30 days before the changes take effect.
• Sending an email to the address registered to your account.
• Updating the "Effective Date" at the top of this document.

Continued use of the mega 8 Platform after changes take effect constitutes acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

If you have any questions, concerns or complaints regarding how mega 8 handles your personal data, please contact our Data Protection Officer (DPO):

We are committed to handling all privacy enquiries seriously and within a reasonable timeframe. If you are not satisfied with our response, you have the right to lodge a complaint with Personal Data Protection Department (PDPD) Malaysia as the relevant supervisory authority.